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Method, System, and Data Structure for Trustworthy 
Digital Document Interchange and Preservation 

CLAIMS OF THIS INVENTION 

555 1 ) A method for packaging information objects wherein the package includes an identifier of the 
package object itself and the whole is sealed by cryptographic message authentication 
2) The method of claim (1), wherein the private key portion of a public/private key pair used for sealing 
is protected by use only in subsystems disconnected from networks and, optionally, is frequently 
O replaced. 

i^60 3) The method of claim (1 ), wherein a public key associated with the claim (2) private key is published 
|I and optionally endorsed by a certificate signed by an institution other than that to which the keys 

Ti alluded to in claim (2) belong, with this endorsing institution having a business dependency on its 

reputation for care, know-how, and integrity. 
1 4) The method of claim (1 ), including within the package a record describing a link between two 
365 information objects by referencing their identifiers or indices. 

5) The method of claim (1), including within the package metadata recording a value that binds an 
external object defining a well-known ontology to an included payload element or link. 

6) The method of claim (1), wherein an information object X included in the new package Z is itself 
packaged as described in claim (1) and wherein the identifier of Z alluded to in claim (1) has the 

570 same value as the identifier of X. 

7) A method for packaging an information object with metadata not otherwise provided, where such 
metadata includes software or instructions for interpretation of the information object, or alternatively 
contains a reference to a durable external deposit of such software or instructions. 
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8) The method of claim (7), wherein the information object and the information enabling its 
575 interpretation are bound together by a cryptographic message authentication code, 

9) The method of claim (7), wherein the software for interpretation is encoded with the instruction set of 
a machine, called a Universal Virtual Computer (UVC), that is simple enough for complete 
specification so that it can be emulated without error or omission by any sufficiently skilled third party 
who has the specification of this UVC. 

580 10) The method of claim (7), wherein the software and instructions alluded to implement well-known 

methods that are made reliably interpretable by their schema being standardized and identified by or 
included in the package. 

11) A system for packaging information objects wherein the package created includes an identifier of the 
1 package object itself and the package is sealed by cryptographic message authentication. 

j585 12) The system of claim (1 1 ), wherein the private key portion of a public/private key pair used for sealing 

is protected by use only in subsystems disconnected from networks and, optionally, is frequently 
y replaced. 

3 13) The system of claim (11), wherein a public key associated with the claim (12) private key is 

published and optionally endorsed by a certificate signed by an institution other than that to which 
2590 the keys alluded to in claim (12) belong, with this endorsing institution having a business 

U dependency on its reputation for care, know-how, and integrity. 

14) The system of claim (1 1 ), including within the package created a record describing a link between 
two information objects by referencing their identifiers or indices. 

15) The system of claim (11), including within the package metadata recording a value that binds an 
595 external object defining a well-known ontology to an included payload element or link. 

16) The system of claim (1 1 ), wherein an information object X included in the new package Z is itself 
packaged as described in claim (11) and wherein the identifier of Z alluded to in claim (11) has the 
same value as the identifier of X. 
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17) A system for packaging an information object together with metadata not otherwise provided, where 
such metadata includes software or instructions for interpretation of the information object, or 
alternatively contains a reference to a durable external deposit of such software or instructions. 

18) The system of claim (17), wherein the information object and the information enabling its 
interpretation are bound together by a cryptographic message authentication code. 

19) The system of claim (17), wherein the software for interpretation is encoded with the instruction set 
of a machine, called a Universal Virtual Computer (UVC), that is simple enough so that it can be 
emulated without error or omission by any sufficiently skilled third party who has the specification of 
this UVC. 

20) The system of claim (17), wherein the software and instructions alluded to implement well-known 
methods that are made reliably interpretable by their schema being standardized and either identified 
or included in the package. 

21) An article of manufacture containing packaged information objects wherein the package includes an 
identifier of the package object itself and the package is sealed by cryptographic message 
authentication. 

22) The article of manufacture of claim (21), wherein the private key portion of a public/private key pair 
used for sealing is protected against misappropriation by use only in subsystems disconnected from 
networks and, optionally, is frequently replaced. 

23) The article of manufacture of claim (21), wherein a public key associated with the claim (22) private 
key is published and optionally endorsed by a certificate signed by an institution other than that to 
which the keys alluded to in claim (22) belong, with this endorsing institution having a business 
dependency on its reputation for care, know-how, and integrity. 

24) The article of manufacture of claim (21), including the package recording a link between two 
information objects by referencing their identifiers or indices. 

25) The article of manufacture of claim (21), including within the package metadata recording a value 
that binds an external object defining a well-known ontology to an included payload element or link. 
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625 26) The article of manufacture of claim (21 ), wherein an information object X included in the package Z is 
itself packaged as described in claim (21) and wherein the identifier of Z alluded to in claim (21) has 
the same value as the identifier of X. 

27) An article of manufacture that packages an information object together with metadata not otherwise 
provided, where such metadata includes software or instructions for Interpretation of the information 

630 object, or alternatively contains a reference to a durable deposit of such software or instructions. 

28) The article of manufacture of claim (27), wherein the information object and the information enabling 
its interpretation are bound together by a cryptographic message authentication code. 

29) The article of manufacture of claim (27), wherein the software for interpretation is encoded with the 
instruction set of a machine, called a Universal Virtual Computer (UVC), that is simple enough so 

335 that it can be emulated without error or omission by any sufficiently skilled third party who has the 

specification of this UVC. 

U 30) The article of manufacture of claim (27), wherein the software and instructions alluded to implement 
y well-known methods that are made interpretable by their schema being standardized and identified 

L or included in the package. 
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